Seller beware: No Compliance, No Contract It’s a pleasure to publish an article in the International Security Journal (ISJ) with Georgios Alevras on the introduction of the Cybersecurity Maturity Model Certification (CMMC) by the US Department of War. That takes…
NIST has released an update to its guidance for implementing the security requirements for the Health Insurance Portability and Accountability Act (HIPAA), NIST P 800-66r2. Originally published back in 2008, requiring a refresh. Revision 2 looks like a overhaul of…
Are there any alternative standards? When one ponders the question through the lens of British Industry. The question is not ‘Are there any alternative standards’, but how will UK industry comply to the cyber regulations implemented by international regulators. Cyber…
NIST publishes its final guidance on EV charging cybersecurity with NIST IR 8473 Cybersecurity Framework Profile for Electric Vehicle Extreme Fast Charging Infrastructure. A further CSF profile to add to those already developed by NIST. As we wrote earlier this…
The Cybersecurity Framework Profile 2.0 draft released by NIST is a step closer to aligning the CSF with corporate business and mission objectives. NIST has included Governance(GV) as a core tenet of the framework through with the 5 functions Identify(ID),…
The European Data Protection Board (EDPB) adopted additional General Data Protection Regulation (GDPR) data breach notification guidelines at the end of 2021. At a time when the US Federal government is also progressing legislation through Congress to address cybersecurity governance,…
Cyber insurance prices are up, coverage down and loss ratios rising. Cyber is a difficult risk to manage and innovation, economic growth, cyberspace and technology are not on the side of the underwriter and the insured. In our paper we…
The cyber incident that affected Toyota in Japan last week has highlighted the challenges for Japan’s manufacturers and their supply chains. The first is the fragility of JIT supply chains to impacts in product processing and delivery, the second is…
An informative article on cyber insurance. The announcement in January 2022 that Merck was entitled to a summary judgement following the Not Petya cyber attack of 2017. Set a precedent for cyber insurance claims and the use of the act…
An unexpected fall-out from the Ukraine Russia war is the impact on services provided by Russian contractors to European banks, as highlighted by Deutsche Bank. As the bank braces itself for disruption due to its dependence on Russian IT resources.…
